Architecture/Systems Design Senior Analyst

ABM industries; Georgia; On-site; USD 90,000 - 150,000; Full time

Job summary

ABM Industries is seeking a Sr. Engineer, Identity & Access Management (IAM) to design, implement, and operate secure access across the enterprise. You will work with InfoSec and CoreTech teams to provision users, configure authentication, and enforce access controls.

The role emphasizes PAM (Delinea, CyberArk), SSO/MFA, RBAC governance, audit readiness, and collaboration with cross-functional engineers to maintain compliant IAM programs across regulatory standards such as GDPR, HIPAA, NIST.

Qualifications

• Bachelor's degree in computer science, information technology, or a related field preferred.
• Knowledge of authentication methods, directory services, and access control systems.
• Strong oral and written communication skills.
• Customer facing exposure is a must.
• Strong working knowledge of PAM solutions, including implementation and maintenance (Delinea, CyberArk).
• Understanding of LDAP, Azure AD, SSO, MFA, and on-prem AD concepts.

Responsibilities

• IAM System Design and Implementation: create/modify/delete user accounts and access privileges.
• Regular reviews and audits of user accounts for policy compliance.
• Privileged Access Management: configure and maintain PAM solutions like Delinea and related policies.
• Assist in migration and implementation of PAM solutions.
• Authentication and Authorization: configure SSO, MFA, and password policies; manage RBAC policies.
• Provisioning and de-provisioning automation to improve efficiency and security.
• Access Policy Management: create and enforce access control policies aligned with regulations.
• Access Governance: participate in access reviews and certifications to minimize unnecessary rights.
• Security Policy and Compliance: follow policies and standards; ensure compliant IAM environment.
• Troubleshooting and Support: resolve IAM incidents; support end-users.
• Collaboration and Documentation: work with IT, security, compliance; document IAM processes and configurations.
• Training: provide guidance to junior IAM staff and end-users on best practices.

Skills

Strong communication

Customer facing

Team collaboration

Problem solving

Security mindset

Education

Bachelor's degree in CS/IT or related field

Tools

Delinea

CyberArk

Azure AD

Active Directory

SSO

MFA

LDAP

Job description

ABM is currently seeking a highly motivated and experienced Sr. Engineer, Identity & Access Management (IAM). The IAM position directly reports to the Director, Systems Engineer & Operations. The Identity and Access Engineer (IAE) will play a vital role in safeguarding ABM's digital assets by ensuring that only authorized individuals have access to the right resources. They will work closely cross-functional with InfoSec and CoreTech engineers, administrators, and architects to implement and maintain IAM solutions, including user provisioning, authentication, and access control systems.

Responsibilities

1. IAM System Design and Implementation Management:
   • Assist in the creation, modification, and deletion of user accounts and access privileges in various systems and applications.
   • Conduct regular reviews and audits of user accounts to ensure compliance with security policies.
2. Privileged Access Management:
   • Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting, service account compliance, and related policies.
   • Assist directly in migration and implementation of PAM solutions.
3. Authentication and Authorization:
   • Help in the configuration and maintenance of authentication methods such as single sign-on (SSO), multi-factor authentication (MFA), and password policies.
   • Collaborate in the definition and management of role-based access control (RBAC) policies.
4. Provisioning and De-provisioning:
   • Assist in automating user provisioning and de-provisioning processes to improve efficiency and security.
   • Ensure that employees have access to the appropriate resources during their employment lifecycle.
5. Access Policy Management:
   • Create and enforce access control policies and security standards in alignment with regulatory requirements.
   • Monitor and review access policies and make adjustments as necessary.
6. Access Governance:
   • Participate in access reviews and certification processes to minimize access rights and permissions that are no longer required.
   • Work on IAM reporting and analytics to identify and mitigate risks.
7. Security Policy and Compliance:
   • Follow security policies and industry standards to maintain a secure IAM environment.
   • Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR, HIPAA, NIST).
8. Troubleshooting and Support:
   • Assist in resolving IAM-related incidents and provide support for end-users who encounter access issues.
   • Collaborate with the IT Service Desk and other relevant teams to resolve access problems.
9. Collaboration and Documentation:
   • Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand business requirements.
   • Maintain comprehensive documentation of IAM processes, policies, and configurations.
10. Training:
    • Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in access management.

Required Qualifications

• A bachelor's degree in computer science, information technology, or a related field is preferred.
• Knowledge of authentication methods, directory services, and access control systems.
• Strong oral, and written communication skills
• Customer Facing Exposure is a must.
• Strong working knowledge of PAM solutions, including implementation and maintenance
• Delinea
• CyberArk
• Strong problem-solving skills and attention to detail.
• Strong project management skills and the ability to work in a team environment.
• An eagerness to learn and stay updated on the latest developments in IAM and cybersecurity.
• Good understanding of LDAP concepts and working experience with at least a few of the following technologies:
  • Azure Active Directory, SSO, MFA
  • Active Directory (on-prem)
• Should have the ability to understand customer scenarios and requirements (may include integration situations) and be capable of suggesting solutions.
• Should have good knowledge of current IDM, strong Authentication, and PKI (Public Key Infrastructure) technologies and products.
• Certifications in any of the IAM products would be an added advantage

Preferred Qualifications

• One or more of the following certifications in area of specialty are preferred. Examples include CompTIA, CISSP, CSSLP, CISA, CISM, GIAC certs, ITIL, CFE, CNP, CEH
• ISIM support